# FreeRADIUS-PacketFence RPM SPEC
# BUILDING FOR RELEASE
# 
Summary: PacketFence RADIUS Configuration Pack
Name: freeradius2-packetfence
Version: 1.0.0
Release: %{source_release}%{?dist}
License: GPL
Group: System Environment/Daemons
URL: http://www.packetfence.org
AutoReqProv: 0
BuildArch: noarch
BuildRoot: %{_tmppath}/%{name}-%{version}-%{source_release}-root

Packager: Inverse inc. <support@inverse.ca>
Vendor: PacketFence, http://www.packetfence.org

%define is_release %{?snapshot:0}%{!?snapshot:1}
%if %{is_release}
# used for official releases
Source: http://www.packetfence.org/downloads/PacketFence/src/%{name}-%{version}.tar.gz
%else
# used for snapshot releases
Source: http://www.packetfence.org/downloads/PacketFence/src/%{name}-%{version}-%{source_release}.tar.gz
%endif

Requires: freeradius2

%description

PacketFence is an open source network access control (NAC) system. 
It can be used to effectively secure networks, from small to very large 
heterogeneous networks. PacketFence provides features such 
as 
* registration of new network devices
* detection of abnormal network activities
* isolation of problematic devices
* remediation through a captive portal 
* registration-based and scheduled vulnerability scans.

%prep
%setup -q
%build

%install
%{__rm} -rf $RPM_BUILD_ROOT
%{__install} -d $RPM_BUILD_ROOT/etc/raddb
%{__install} -d $RPM_BUILD_ROOT/etc/raddb/sites-available
cp -r radiusd.conf.pf $RPM_BUILD_ROOT/etc/raddb
cp -r eap.conf.pf $RPM_BUILD_ROOT/etc/raddb
cp -r users.pf $RPM_BUILD_ROOT/etc/raddb
cp -r sites-available/packetfence $RPM_BUILD_ROOT/etc/raddb/sites-available
cp -r sites-available/packetfence-tunnel $RPM_BUILD_ROOT/etc/raddb/sites-available

%pre

if [ ! `id -u` = "0" ];
then
  echo You must install this package as root!
  exit
fi

%post
#Make Backups
cp /etc/raddb/radiusd.conf /etc/raddb/radiusd.conf.pfsave   
chown root:radiusd /etc/raddb/radiusd.conf.pfsave

cp /etc/raddb/eap.conf /etc/raddb/eap.conf.pfsave      
chown root:radiusd /etc/raddb/eap.conf.pfsave

cp /etc/raddb/users /etc/raddb/users.pfsave
chown root:radiusd /etc/raddb/users.pfsave

#Copy dummy config to the real one
mv /etc/raddb/radiusd.conf.pf /etc/raddb/radiusd.conf
mv /etc/raddb/eap.conf.pf /etc/raddb/eap.conf
mv /etc/raddb/users.pf /etc/raddb/users

#Create symlinks for virtual hosts
ln -s /etc/raddb/sites-available/packetfence /etc/raddb/sites-enabled/packetfence
ln -s /etc/raddb/sites-available/packetfence-tunnel /etc/raddb/sites-enabled/packetfence-tunnel

echo Installation complete.  Please restart Radius....

%preun
# Remove custom configs and put back the right one
mv /etc/raddb/radiusd.conf.pfsave /etc/raddb/radiusd.conf   
mv /etc/raddb/eap.conf.pfsave /etc/raddb/eap.conf       
mv /etc/raddb/users.pfsave /etc/raddb/users

# Remove symnlinks
rm -f /etc/raddb/sites-enabled/packetfence 
rm -f /etc/raddb/sites-enabled/packetfence-tunnel

%postun

%files

%defattr(0640, root, radiusd)

%config				/etc/raddb/radiusd.conf.pf 
%config		        	/etc/raddb/eap.conf.pf
%config				/etc/raddb/users.pf
%config(noreplace)      	/etc/raddb/sites-available/packetfence
%config(noreplace)      	/etc/raddb/sites-available/packetfence-tunnel


%changelog
* Mon Mar 14 2011 Francois Gaudreault <fgaudreault@inverse.ca>
- Initial SPEC release